<?php
//Dobavqne .
include("config.php");
if(isSet($_POST['submit']))
{
$text = addslashes(htmlspecialchars($_POST['textme']));
$insert = mysql_query("INSERT INTO `text`( `text` ) VALUES ('$text')")or die(mysql_error());
echo "Dobaveno uspeshno ! ";
}
else
{
echo "<form method='post' name='text' action=''>";
echo "<textarea name='textme' row='20' size='20'></textarea><br>";
echo "<input type='submit' name='submit' value='Submit'></form>";
}
?>
<?php
//User stranica.
include("config.php");
$query = mysql_query("SELECT `id`,`approved`,`text` FROM `text`");
$nomer = 1;
while($row = mysql_fetch_array($query))
{
if ($row['text'] && $row['approved'] ==1)
{
echo "<br>$nomer".$row['text'];
$nomer++;
}
else
{
echo "<br>Chaka dodobrenie !";
$nomer++;
}
}
?>
<?php
// V admin panela.
include("config.php");
$query = mysql_query("SELECT `id`,`approved`,`text` FROM `text`");
$nomer = 1;
while($row = mysql_fetch_array($query))
{
if ($row['text'] && $row['approved']== 0)
{
echo "<br>$nomer. ".$row['text']." <a name='".$row['id']."' href=\"?edit=".$row['id']."\">Редактирай</a>";
$nomer++;
}
else
{
echo "<br>Odobrena !";
$nomer++;
}
}
if (isset($_GET['id']))
{
$upid=(int)$_GET['id'];
mysql_query("UPDATE `text` SET `approved` = '1' WHERE `id` = '$upid' ");
}
?>